SHINDO5

Toyokawa Shinkin Bank

Seal registration forms13,640records

POSSIBLE LEAKID document (type not stated) images / Bank accountImproper disposal · Closed (final report)

Open in the live monitor ▶
Disclosed
May 18, 2026
Detected
Dec 2025
Detection to disclosure
168 days
Leak
Leak possible
Type
Improper disposal
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityName, Date of birth, Gender
ContactAddress, Phone number
ID documentsSeal impression (image)
Account dataCustomer number
Financial & paymentTransaction type and account number

How many

  • Seal registration forms 13,640 records

Who is affected

  • Account holders

Cause

No sign of removal or outside inquiries, so most likely discarded by mistake

Timeline

  1. Found in an all-branch check from December 2025
  2. First disclosure

Response

  • Change process

For withdrawals and closures, any seal is accepted after identity checks

What you should do

  1. ID numbers can never be changed. Request your credit file from CIC, JICC and others and look for contracts or loans you didn't make
  2. Register a self-declaration (honnin shinkoku) with the credit bureaus so lenders check applications in your name more carefully. The stronger loan self-restriction scheme also blocks your own borrowing and can't be withdrawn for 3 months. Neither stops bank accounts being opened
  3. Scammers who know your account number pose as refund staff. No bank or company asks for your PIN
  4. Treat refund or apology calls and texts as scams. Call back only on the number from the official site
  5. Watch for unexpected mail or invoices; your address is hard to change
  6. Check the company's notice to see if you're affected

Lessons for companies

  1. Don't keep ID or bank data: delete after checks or use a KYC provider
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources